Privacy Policy

Unbinder (“we”, “us”) is an independent mobile application for cataloguing Pokémon trading cards. We collect the minimum amount of information needed to operate the service.

What we collect

• Account and profile data. Your email address, Unbinder user ID and, when you add them, your name, username, avatar, bio, country and city. We use these to sign you in, connect your collection to your account and support collector profiles and trading.
• Collection cost and valuation data. The cards, sealed products, binders, wishlists, notes, optional purchase costs, estimated collection values, value changes and other collection details you save. This is used only to provide collection-management features. Because estimated collection values describe assets, we conservatively declare them as other financial information in Apple’s App Privacy label. Google Play classifies subscription and acquisition transactions as purchase history; Unbinder is not a financial-services app. Unbinder does not receive or store your bank-account details, payment-card details, credit information, income or debts. Private collection records are only available to your account unless you choose to share something.
• Scans. The scanner is intended only for trading-card photos; do not include people, identity documents or other personal material. A photo taken by the scanner is sent to our identification service. Our processor may retain API inputs and outputs for up to 30 days under its standard commercial retention policy, with limited longer retention for usage-policy enforcement or legal obligations. We keep outcome metadata linked to your account, such as the suggested card, confidence, candidate list and the card you select or reject, so we can measure and improve identification accuracy. We also keep the photo the scanner received for every scan: the capture sent for identification, which on iOS is already cropped to the card frame. It is linked to your account and to that scan’s result: which card was identified and which card you added, or that you rejected the result or the scan failed. We use these photos to improve and train the scanner’s recognition, based on our legitimate interest in making the scanner more accurate (Art. 6(1)(f) GDPR). “Help improve the scanner” is on by default. You can object at any time by turning it off in Settings → Preferences; that choice is saved to your account, so it stays off on a new phone after you sign in. If you chose “No thanks” when we asked earlier, it stays off. The photos are stored privately in Unbinder’s storage, never shown to other collectors and never sold.
• Photos you choose to save. Profile images and photos you attach to cards or sealed products are stored separately from scanner images so the app can show them back to you. You can remove attached photos in the app; all are deleted when you delete your account.
• Messages and other content. Trade offers, chat messages, reports and other content you submit are stored so the relevant feature works and, where applicable, so we can handle safety reports.
• Purchases, subscriptions and Apple Ads attribution. If you buy Unbinder Pro, we receive product, transaction, subscription status, renewal and storefront information from Apple or Google Play through RevenueCat. On iOS, Apple may also provide RevenueCat with a standard attribution token and campaign, ad-group and keyword metadata so we can measure campaign and subscription effectiveness. Our server copies the media source and the campaign, ad-group, keyword, ad and creative names from those purchase events into our PostHog analytics, linked to your account. This does not use IDFA and does not require App Tracking Transparency permission. We do not receive or store your payment-card details.
• Product analytics and searches. PostHog receives events such as page or screen views, searches, feature interactions, scan outcomes and timing information. Before sign-in these use an anonymous device or browser ID; after sign-in they are linked to your Unbinder user ID. Events can include platform, screen, search terms and relevant card, binder or content IDs. PostHog may derive a coarse region from the network request. We do not send it your name, email, collection records, messages or photos.
• Diagnostics. PostHog receives app crashes, JavaScript errors, stack information and limited performance measurements so we can find and fix faults. Sentry (EU) receives native crash reports from the mobile app with device, OS and build context; it does not receive your searches or the addresses of the requests the app makes. After sign-in, this diagnostic data can be linked to your Unbinder user ID. It does not include scanner images or photos you attach.
• Notifications. If you allow push notifications, we store an Expo push token linked to your account, along with your notification preferences, so we can deliver alerts you asked for.

Where your data lives

Unbinder uses a small set of carefully chosen processors, all based in the EU where possible:

• Supabase (EU). Stores your account (email, user ID), your collection data (binders, boxes, cards, slots) and the card photos you attach and the scan photos described above. Supabase is our database, authentication and storage provider.
• Resend (EU, Ireland). Sends you transactional emails such as magic-link sign-in links, and a short series of onboarding emails in the first weeks after you create an account (legitimate interest; every one carries an unsubscribe link). Resend never receives your collection data.
• OpenAI API and Anthropic Claude API (United States). OpenAI receives the photo you take with the in-app scanner for the primary card-identification attempt. Anthropic receives it only as a fallback if that OpenAI request fails. Commercial API inputs are not used to train either provider’s models by default. Unbinder disables OpenAI response storage. Both providers may still retain API content for up to 30 days for safety and usage-policy enforcement, with limited legal or agreed exceptions. Their commercial data-processing terms include safeguards for international transfers.
• PostHog (EU, Frankfurt). Receives the product analytics, search, device, coarse-region, crash and diagnostic data described above.
• Sentry (EU, Frankfurt). Receives native crash reports from the mobile app with device, OS and build context so we can fix crashes that happen outside the app’s JavaScript code.
• OpenAI Ads (United States), Meta (Ireland / United States) and TikTok (Ireland). When you open unbinder.app/get from an ad in ChatGPT, we send OpenAI the click reference from that ad link, your IP address and your browser’s user-agent string so we can measure whether the ad led to a store visit. This happens on our server, sets no cookie and is not linked to an Unbinder account. On Android, the click reference from a ChatGPT, Facebook, Instagram or TikTok ad travels with the Google Play install into the app. If you then create an account or start a subscription within 30 days, we report that to the network that showed the ad, together with a hashed (unreadable) version of your e-mail address and account ID and, for a subscription, the amount, so we can tell which ads bring in collectors. We never share your collection, your name or your unhashed e-mail address with an ad network.
• Singular (United States). The mobile app includes Singular’s measurement SDK so we can tell which ad on TikTok, Meta, Google or Apple Ads led to an install. Singular receives your device’s advertising ID on Android (you can reset or delete it in your device settings) or the app vendor ID on iPhone, the device model and operating system, your IP address, the install time, and steps in the app, creating an account, adding your first card and starting a trial or subscription with its price, linked to your Unbinder account ID. Singular reports the install and those steps to the network that showed the ad. We do not ask for iPhone tracking permission, so on iPhone the networks only receive Apple’s anonymous SKAdNetwork counts.
• RevenueCat, Apple and Google. Process in-app purchases and subscription status. RevenueCat uses your Unbinder user ID to connect an entitlement to your account; Apple or Google handles the store payment. Apple and RevenueCat also process standard Apple Ads attribution for campaign measurement.
• Expo Push Service, Apple Push Notification service and Firebase Cloud Messaging. Receive your push token and notification payload when we send a notification you enabled.
• Fly.io (Amsterdam), Vercel (EU) and GitHub (United States). Fly.io runs the Unbinder API and the scheduled jobs that touch your data (price alerts, trade notifications, the weekly digest) in Amsterdam. Vercel serves this website from its Frankfurt region. GitHub-hosted servers in the United States run only a daily scanner-health check that reads aggregate scan statistics, never your collection, wishlist or contacts.

These providers process data to deliver Unbinder on our behalf. We do not sell personal data or share it for third-party advertising.

What we never do

• Sell, rent or share your collection with third parties.
• Use your data for advertising profiling.
• Collect precise location, contacts, health data, microphone recordings or payment-card details.
• Show your scan photos to other collectors or sell them.

Affiliate partnerships

When you follow a marketplace link from a card or sealed product, Unbinder may receive a small commission if you buy, at no extra cost to you. Qualifying eBay and TCGplayer links may earn commission; Cardmarket is used for price comparison. On this website, pages that contain commission-earning links say so. Unbinder is not affiliated with Amazon.

• eBay Partner Network (EPN) — active affiliate program for eBay listings.
• Cardmarket — links for comparing European card prices and offers. On this website, pages that contain commission-earning links say so.
• TCGplayer — active affiliate program for card and sealed-product listings.

Once you leave Unbinder, the merchant’s own privacy policy applies and they may set cookies on their domain. We do not see what you buy or how much you spend. See our affiliate disclosure for details.

Your rights (GDPR)

Unbinder is operated from the Netherlands. EU users have the right to access the data we hold about them, to correct it, to export it in a portable, machine-readable format (right to data portability), to delete it, to restrict or object to our processing of it, and to lodge a complaint with their national data protection authority. Email support@unbinder.app and we’ll action the request within 30 days.

Deleting your account

You can permanently delete your Unbinder account from inside the app: go to Settings → Account → Delete account. Deletion removes your authentication record and user data, queues deletion of your account-linked PostHog events, and deletes your RevenueCat customer record. It does not cancel an active App Store or Google Play subscription; manage that separately in your Apple Account or Google Play settings. If you used Sign in with Apple, you can also remove Unbinder from those Apple Account settings after deletion. There is no recovery window. If you cannot use the in-app flow, email support@unbinder.app and we’ll action the request within 30 days.

How long we keep your data

• Account, profile, entitlement and push-token data: kept until you delete your account, remove the data, or the token becomes invalid, subject to any legal record-keeping requirement.
• Collection, trade and message data: kept until you delete it where the app allows, or until you delete your account.
• Scan photos: kept only when you added the card yourself, picked the right card from the suggestions or rejected the result, or when the scanner could not recognise the card. Cards added automatically in Quick scan mode don’t count. Every other scan photo is deleted within 24 hours. Kept photos stay for as long as “Help improve the scanner” is on. Turning the setting off deletes them, and so does deleting your account. What the scanner has already learned from photos stays in the scanner; the scanner itself does not contain the photos. OpenAI, or Anthropic when the fallback is used, may retain API content for up to 30 days for safety and usage-policy enforcement, with the limited exceptions described above. Scan outcome metadata is kept until you delete your account.
• Saved profile, card and sealed-product photos: kept until you remove them where the app allows, or until you delete your account.
• Analytics, diagnostics and campaign attribution: PostHog events are kept for up to 12 months, then aged out; Apple Ads attribution is kept by RevenueCat under its retention terms until the customer record is deleted; the copy in PostHog follows the PostHog period above. Account deletion requests earlier deletion of account-linked PostHog events and deletes the RevenueCat customer record.
• Email logs (sign-in links sent via Resend): kept for up to 30 days for delivery troubleshooting, then deleted.
• Backups: encrypted database backups are retained for 30 days, after which deleted accounts are unrecoverable even from backup.

Minimum age

Unbinder’s scanner and private collection features are intended for users aged 13 and over. By accepting the Terms at sign-up you confirm you meet that age; every scan request carries that confirmation, not your date of birth. Community features that put users in contact with one another — including a public collector username, trading and messaging — are available only to users aged 16 and over. When you claim a username, we ask you to confirm that age band and accept the current community terms. We store the community confirmation time and terms version, not your date of birth. Unbinder is not directed at children under 13 and we do not knowingly collect their personal data. If you believe a child under 13 has created an account, email support@unbinder.app and we will delete the account and associated data without delay.

Cookies and local storage

This website sets no tracking cookies and shows no cookie banner because none is needed. It uses two functional cookies only: one that keeps you signed in on product pages, and one that remembers your language choice. On signed-in product pages, your browser’s local storage also keeps an anonymous analytics identifier for PostHog; public pages such as the blog and shared binders keep nothing beyond the page view itself. Merchants may set cookies on their own domain once you follow a marketplace link (see Affiliate partnerships).

Contact

Questions? Reach the human behind Unbinder at support@unbinder.app.